﻿<?xml version="1.0" encoding="utf-8"?><helpItems xmlns="http://msh" schema="maml">
<command:command xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:command="http://schemas.microsoft.com/maml/dev/command/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10">
	<command:details>
		<command:name>Convert-GUIDtoLDAPGUID</command:name>
		<maml:description>
			<maml:para>Converts a GUID into a format which can be used in an LDAP Query</maml:para>
		</maml:description>
		<maml:copyright>
			<maml:para />
		</maml:copyright>
		<command:verb>Convert</command:verb>
		<command:noun>GUIDtoLDAPGUID</command:noun>
		<dev:version />
	</command:details>
	<maml:description>
		<maml:para>Converts a GUID into a format which can be used in an LDAP query similar to the query below:</maml:para>
		<maml:para></maml:para>
		<maml:para>(&amp;(objectCategory=person(objectGUID=\8e\34\6c\15\22\8b\e1\4c\82\c1\7e\82\b5\5f\3b\2c))</maml:para>
	</maml:description>
	<command:syntax>
		<command:syntaxItem>
			<maml:name>Convert-GUIDtoLDAPGUID</maml:name>
			<command:parameter required="true" variableLength="false" globbing="false" pipelineInput="false" position="0">
				<maml:name>GUID</maml:name>
				<maml:description>
					<maml:para>String value of GUID (i.e '156c348e-8b22-4ce1-82c1-7e82b55f3b2c')</maml:para>
				</maml:description>
				<command:parameterValue required="true" variableLength="false">String</command:parameterValue>
			</command:parameter>
		</command:syntaxItem>
		<command:syntaxItem>
			<maml:name>Convert-GUIDtoLDAPGUID</maml:name>
			<command:parameter required="true" variableLength="false" globbing="false" pipelineInput="true (ByValue)" position="0">
				<maml:name>InputObject</maml:name>
				<maml:description>
					<maml:para>Object representation of a GUID. Accepted types for this value are:</maml:para>
					<maml:para></maml:para>
					<maml:para>&gt; Microsoft.ActiveDirectory.Management.ADUser (i.e from Get-ADUser)</maml:para>
					<maml:para>&gt; System.String</maml:para>
					<maml:para>&gt; System.Guid</maml:para>
				</maml:description>
				<command:parameterValue required="true" variableLength="false">Object</command:parameterValue>
			</command:parameter>
		</command:syntaxItem>
	</command:syntax>
	<command:parameters>
		<command:parameter required="true" variableLength="false" globbing="false" pipelineInput="false" position="0">
			<maml:name>GUID</maml:name>
			<maml:description>
				<maml:para>String value of GUID (i.e '156c348e-8b22-4ce1-82c1-7e82b55f3b2c')</maml:para>
			</maml:description>
			<command:parameterValue required="true" variableLength="false">String</command:parameterValue>
			<dev:type>
				<maml:name>String</maml:name>
				<maml:uri/>
			</dev:type>
			<dev:defaultValue></dev:defaultValue>
		</command:parameter>
		<command:parameter required="true" variableLength="false" globbing="false" pipelineInput="true (ByValue)" position="0">
			<maml:name>InputObject</maml:name>
			<maml:description>
				<maml:para>Object representation of a GUID. Accepted types for this value are:</maml:para>
				<maml:para></maml:para>
				<maml:para>&gt; Microsoft.ActiveDirectory.Management.ADUser (i.e from Get-ADUser)</maml:para>
				<maml:para>&gt; System.String</maml:para>
				<maml:para>&gt; System.Guid</maml:para>
			</maml:description>
			<command:parameterValue required="true" variableLength="false">Object</command:parameterValue>
			<dev:type>
				<maml:name>Object</maml:name>
				<maml:uri/>
			</dev:type>
			<dev:defaultValue></dev:defaultValue>
		</command:parameter>
	</command:parameters>
	<command:inputTypes>
		<command:inputType>
			<dev:type>
				<maml:name></maml:name>
				<maml:uri/>
				<maml:description>
					<maml:para></maml:para>
				</maml:description>
			</dev:type>
			<maml:description></maml:description>
		</command:inputType>
	</command:inputTypes>
	<command:returnValues>
		<command:returnValue>
			<dev:type>
				<maml:name></maml:name>
				<maml:uri/>
				<maml:description>
					<maml:para></maml:para>
				</maml:description>
			</dev:type>
			<maml:description></maml:description>
	</command:returnValue>
		</command:returnValues>
	<command:terminatingErrors></command:terminatingErrors>
	<command:nonTerminatingErrors></command:nonTerminatingErrors>
	<maml:alertSet>
		<maml:title></maml:title>
		<maml:alert>
			<maml:para></maml:para>
		</maml:alert>
	</maml:alertSet>
	<command:examples>
		<command:example>
			<maml:title>
				-------------------------- EXAMPLE 1 --------------------------
			</maml:title>
			<maml:introduction>
				<maml:para>PS C:\&gt; </maml:para>
			</maml:introduction>
			<dev:code>Convert-GUIDtoLDAPGUID -GUID '156c348e-8b22-4ce1-82c1-7e82b55f3b2c'
			</dev:code>
			<dev:remarks>
				<maml:para>Returns: \8e\34\6c\15\22\8b\e1\4c\82\c1\7e\82\b5\5f\3b\2c</maml:para>
				<maml:para></maml:para>
				<maml:para></maml:para>
				<maml:para>Description</maml:para>
                <maml:para>-----------</maml:para>
				<maml:para>This example converts a [System.String] value '156c348e-8b22-4ce1-82c1-7e82b55f3b2c' into a valid LDAP GUID</maml:para>
				<maml:para></maml:para>
				<maml:para></maml:para>
				<maml:para></maml:para>
				<maml:para></maml:para>
			</dev:remarks>
		</command:example>
		<command:example>
			<maml:title>
				-------------------------- EXAMPLE 2 --------------------------
			</maml:title>
			<maml:introduction>
				<maml:para>PS C:\&gt; </maml:para>
			</maml:introduction>
			<dev:code>[GUID]'156c348e-8b22-4ce1-82c1-7e82b55f3b2c' | Convert-GUIDtoLDAPGUID
			</dev:code>
			<dev:remarks>
				<maml:para>Returns: \8e\34\6c\15\22\8b\e1\4c\82\c1\7e\82\b5\5f\3b\2c</maml:para>
				<maml:para></maml:para>
				<maml:para></maml:para>
				<maml:para>Description</maml:para>
                <maml:para>-----------</maml:para>
				<maml:para>This example passes a [System.Guid] value through the pipeline to Convert-GUIDtoLDAPGUID</maml:para>
				<maml:para></maml:para>
				<maml:para></maml:para>
				<maml:para></maml:para>
				<maml:para></maml:para>
			</dev:remarks>
		</command:example>
		<command:example>
			<maml:title>
				-------------------------- EXAMPLE 3 --------------------------
			</maml:title>
			<maml:introduction>
				<maml:para>PS C:\&gt; </maml:para>
			</maml:introduction>
			<dev:code>Get-ADUser -Filter {cn -eq 'johnsmith'} | Convert-GUIDtoLDAPGUID
			</dev:code>
			<dev:remarks>
				<maml:para>Returns: \8e\34\6c\15\22\8b\e1\4c\82\c1\7e\82\b5\5f\3b\2c</maml:para>
				<maml:para></maml:para>
				<maml:para></maml:para>
				<maml:para>Description</maml:para>
                <maml:para>-----------</maml:para>
				<maml:para>This example passes a [Microsoft.ActiveDirectory.Management.ADUser] object through the pipeline to Convert-GUIDtoLDAPGUID</maml:para>
				<maml:para></maml:para>
				<maml:para></maml:para>
				<maml:para></maml:para>
				<maml:para></maml:para>
			</dev:remarks>
		</command:example>
	</command:examples>
	<maml:relatedLinks>
	</maml:relatedLinks>
</command:command>
<command:command xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:command="http://schemas.microsoft.com/maml/dev/command/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10">
	<command:details>
		<command:name>Get-ADGroupMembershipAudit</command:name>
		<maml:description>
			<maml:para>Retrieves the membership history (all add/remove operations) for a given Active Directory Group</maml:para>
		</maml:description>
		<maml:copyright>
			<maml:para />
		</maml:copyright>
		<command:verb>Get</command:verb>
		<command:noun>ADGroupMembershipAudit</command:noun>
		<dev:version />
	</command:details>
	<maml:description>
		<maml:para>Retrieves the membership history (all add/remove operations) for a given Active Directory Group. This is based on replication meta data synced between Domain Controllers</maml:para>
	</maml:description>
	<command:syntax>
		<command:syntaxItem>
			<maml:name>Get-ADGroupMembershipAudit</maml:name>
			<command:parameter required="true" variableLength="true" globbing="false" pipelineInput="false" position="0">
				<maml:name>Identity</maml:name>
				<maml:description>
					<maml:para>A string value which can be searched in Active Directory to find the group object. String will be matched against the following LDAP attributes - (name)/(cn)/(distinguishedname)</maml:para>
				</maml:description>
				<command:parameterValue required="true" variableLength="true">String[]</command:parameterValue>
			</command:parameter>
		</command:syntaxItem>
		<command:syntaxItem>
			<maml:name>Get-ADGroupMembershipAudit</maml:name>
			<command:parameter required="true" variableLength="false" globbing="false" pipelineInput="true (ByValue)" position="0">
				<maml:name>InputObject</maml:name>
				<maml:description>
					<maml:para>Group objects to be searched for in Active Directory. Enter a variable that contains the objects, or type a command to get the objects (i.e Get-ADGroup). Can also accept string values (See Parameter &apos;Identity&apos; for more information)</maml:para>
				</maml:description>
				<command:parameterValue required="true" variableLength="false">Object</command:parameterValue>
			</command:parameter>
		</command:syntaxItem>
	</command:syntax>
	<command:parameters>
		<command:parameter required="true" variableLength="true" globbing="false" pipelineInput="false" position="0">
			<maml:name>Identity</maml:name>
			<maml:description>
				<maml:para>A string value which can be searched in Active Directory to find the group object. String will be matched against the following LDAP attributes - (name)/(cn)/(distinguishedname)</maml:para>
			</maml:description>
			<command:parameterValue required="true" variableLength="true">String[]</command:parameterValue>
			<dev:type>
				<maml:name>String[]</maml:name>
				<maml:uri/>
			</dev:type>
			<dev:defaultValue></dev:defaultValue>
		</command:parameter>
		<command:parameter required="true" variableLength="false" globbing="false" pipelineInput="true (ByValue)" position="0">
			<maml:name>InputObject</maml:name>
			<maml:description>
				<maml:para>Group objects to be searched for in Active Directory. Enter a variable that contains the objects, or type a command to get the objects (i.e Get-ADGroup). Can also accept string values (See Parameter &apos;Identity&apos; for more information)</maml:para>
			</maml:description>
			<command:parameterValue required="true" variableLength="false">Object</command:parameterValue>
			<dev:type>
				<maml:name>Object</maml:name>
				<maml:uri/>
			</dev:type>
			<dev:defaultValue></dev:defaultValue>
		</command:parameter>
	</command:parameters>
	<command:inputTypes>
		<command:inputType>
			<dev:type>
				<maml:name>System.String
Microsoft.ActiveDirectory.Management.ADGroup</maml:name>
				<maml:uri/>
				<maml:description>
					<maml:para></maml:para>
				</maml:description>
			</dev:type>
			<maml:description></maml:description>
		</command:inputType>
	</command:inputTypes>
	<command:returnValues>
		<command:returnValue>
			<dev:type>
				<maml:name></maml:name>
				<maml:uri/>
				<maml:description>
					<maml:para></maml:para>
				</maml:description>
			</dev:type>
			<maml:description></maml:description>
	</command:returnValue>
		</command:returnValues>
	<command:terminatingErrors></command:terminatingErrors>
	<command:nonTerminatingErrors></command:nonTerminatingErrors>
	<maml:alertSet>
		<maml:title></maml:title>
		<maml:alert>
			<maml:para></maml:para>
		</maml:alert>
	</maml:alertSet>
	<command:examples>
		<command:example>
			<maml:title>
				-------------------------- EXAMPLE 1 --------------------------
			</maml:title>
			<maml:introduction>
				<maml:para>PS C:\&gt; </maml:para>
			</maml:introduction>
			<dev:code>Get-ADGroupMembershipAudit -Identity &apos;Finance Department&apos;
			</dev:code>
			<dev:remarks>
				<maml:para>Group                              Member                            Operation                         Timestamp
-----                              ------                            ---------                         ---------
Finance Department                 CN=jane.doe,OU=foo,DC=bar,DC=c... Removed                           03/12/2013 09:41:42
Finance Department                 CN=john.smith,OU=foo,DC=bar,DC... Added                             04/12/2013 10:11:20
Finance Department                 CN=some.body,OU=foo,DC=bar,DC=... Added                             10/12/2013 09:08:01
</maml:para>
				<maml:para></maml:para>
				<maml:para></maml:para>
				<maml:para>Description</maml:para>
                <maml:para>-----------</maml:para>
				<maml:para>This example retrieves membership history for the &apos;Finance Department&apos; group in Active Directory</maml:para>
				<maml:para></maml:para>
				<maml:para></maml:para>
				<maml:para></maml:para>
				<maml:para></maml:para>
			</dev:remarks>
			<command:commandLines>
				<command:commandLine>
					<command:commandText></command:commandText>
				</command:commandLine>
			</command:commandLines>
		</command:example>
		<command:example>
			<maml:title>
				-------------------------- EXAMPLE 2 --------------------------
			</maml:title>
			<maml:introduction>
				<maml:para>PS C:\&gt; </maml:para>
			</maml:introduction>
			<dev:code>Get-ADGroup -Filter {cn -eq &apos;Finance Department&apos;} | Get-ADGroupMembershipAudit</dev:code>
			<dev:remarks>
				<maml:para>Group                              Member                            Operation                         Timestamp
-----                              ------                            ---------                         ---------
Finance Department                 CN=jane.doe,OU=foo,DC=bar,DC=c... Removed                           03/12/2013 09:41:42
Finance Department                 CN=john.smith,OU=foo,DC=bar,DC... Added                             04/12/2013 10:11:20
Finance Department                 CN=some.body,OU=foo,DC=bar,DC=... Added                             10/12/2013 09:08:01
</maml:para>
				<maml:para></maml:para>
				<maml:para></maml:para>
				<maml:para>Description</maml:para>
                <maml:para>-----------</maml:para>
				<maml:para>This example pipes an AD Group object into Get-ADGroupMembershipAudit and retrieves membership history</maml:para>
				<maml:para></maml:para>
				<maml:para></maml:para>
				<maml:para></maml:para>
				<maml:para></maml:para>
			</dev:remarks>
			<command:commandLines>
				<command:commandLine>
					<command:commandText></command:commandText>
				</command:commandLine>
			</command:commandLines>
		</command:example>
	</command:examples>
	<maml:relatedLinks>
	</maml:relatedLinks>
</command:command>
<command:command xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:command="http://schemas.microsoft.com/maml/dev/command/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10">
	<command:details>
		<command:name>Get-ADObjectPagedAttribute</command:name>
		<maml:description>
			<maml:para>Lightweight retrieval of attribute values from a given Active Directory Object</maml:para>
		</maml:description>
		<maml:copyright>
			<maml:para />
		</maml:copyright>
		<command:verb>Get</command:verb>
		<command:noun>ADObjectPagedAttribute</command:noun>
		<dev:version />
	</command:details>
	<maml:description>
		<maml:para>Lightweight retrieval of attribute values from a given Active Directory Object. This function is not meant to replace the Get-AD* functionality, but is a purpose built solution for retrieving attributes which contain a large number of values (usually > 1000). This cmdlet has only been tested against retrieving LDAP attributes of 'String' type</maml:para>
		<maml:para></maml:para>
	</maml:description>
	<command:syntax>
		<command:syntaxItem>
			<maml:name>Get-ADObjectPagedAttribute</maml:name>
			<command:parameter required="true" variableLength="true" globbing="false" pipelineInput="false" position="0">
				<maml:name>Identity</maml:name>
				<maml:description>
					<maml:para>A string value which can be searched in Active Directory to find a matching object. String will be matched against the following LDAP attributes - (name)/(userPrincipalName)/(cn)/(samaccountname)/(distinguishedname)</maml:para>
				</maml:description>
				<command:parameterValue required="true" variableLength="true">String[]</command:parameterValue>
			</command:parameter>
			<command:parameter required="true" variableLength="false" globbing="false" pipelineInput="false" position="1">
				<maml:name>Attribute</maml:name>
				<maml:description>
					<maml:para>The LDAP Display Name of the attribute to retrieve (i.e member)</maml:para>
				</maml:description>
				<command:parameterValue required="true" variableLength="false">String</command:parameterValue>
			</command:parameter>
		</command:syntaxItem>
		<command:syntaxItem>
			<maml:name>Get-ADObjectPagedAttribute</maml:name>
			<command:parameter required="true" variableLength="false" globbing="false" pipelineInput="true (ByValue)" position="0">
				<maml:name>InputObject</maml:name>
				<maml:description>
					<maml:para>Retrieves the specified Active Directory Objects and their attribute(s). Enter a variable that contains the objects, or type a command to get the objects (i.e Get-ADUser). Can also accept string values (See Parameter 'Identity' for more information)</maml:para>
				</maml:description>
				<command:parameterValue required="true" variableLength="false">Object</command:parameterValue>
			</command:parameter>
			<command:parameter required="true" variableLength="false" globbing="false" pipelineInput="false" position="1">
				<maml:name>Attribute</maml:name>
				<maml:description>
					<maml:para>The LDAP Display Name of the attribute to retrieve (i.e member)</maml:para>
				</maml:description>
				<command:parameterValue required="true" variableLength="false">String</command:parameterValue>
			</command:parameter>
		</command:syntaxItem>
	</command:syntax>
	<command:parameters>
		<command:parameter required="true" variableLength="true" globbing="false" pipelineInput="false" position="0">
			<maml:name>Identity</maml:name>
			<maml:description>
				<maml:para>A string value which can be searched in Active Directory to find a matching object. String will be matched against the following LDAP attributes - (name)/(userPrincipalName)/(cn)/(samaccountname)/(distinguishedname)</maml:para>
			</maml:description>
			<command:parameterValue required="true" variableLength="true">String[]</command:parameterValue>
			<dev:type>
				<maml:name>String[]</maml:name>
				<maml:uri/>
			</dev:type>
			<dev:defaultValue></dev:defaultValue>
		</command:parameter>
		<command:parameter required="true" variableLength="false" globbing="false" pipelineInput="false" position="1">
			<maml:name>Attribute</maml:name>
			<maml:description>
				<maml:para>The LDAP Display Name of the attribute to retrieve (i.e member)</maml:para>
			</maml:description>
			<command:parameterValue required="true" variableLength="false">String</command:parameterValue>
			<dev:type>
				<maml:name>String</maml:name>
				<maml:uri/>
			</dev:type>
			<dev:defaultValue></dev:defaultValue>
		</command:parameter>
		<command:parameter required="true" variableLength="false" globbing="false" pipelineInput="true (ByValue)" position="0">
			<maml:name>InputObject</maml:name>
			<maml:description>
				<maml:para>Retrieves the specified Active Directory Objects and their attribute(s). Enter a variable that contains the objects, or type a command to get the objects (i.e Get-ADUser). Can also accept string values (See Parameter 'Identity' for more information)</maml:para>
			</maml:description>
			<command:parameterValue required="true" variableLength="false">Object</command:parameterValue>
			<dev:type>
				<maml:name>Object</maml:name>
				<maml:uri/>
			</dev:type>
			<dev:defaultValue></dev:defaultValue>
		</command:parameter>
	</command:parameters>
	<command:inputTypes>
		<command:inputType>
			<dev:type>
				<maml:name>System.String
Microsoft.ActiveDirectory.Management.ADGroup
Microsoft.ActiveDirectory.Management.ADUser</maml:name>
				<maml:uri/>
				<maml:description>
					<maml:para></maml:para>
				</maml:description>
			</dev:type>
			<maml:description></maml:description>
		</command:inputType>
	</command:inputTypes>
	<command:returnValues>
		<command:returnValue>
			<dev:type>
				<maml:name></maml:name>
				<maml:uri/>
				<maml:description>
					<maml:para></maml:para>
				</maml:description>
			</dev:type>
			<maml:description></maml:description>
	</command:returnValue>
		</command:returnValues>
	<command:terminatingErrors></command:terminatingErrors>
	<command:nonTerminatingErrors></command:nonTerminatingErrors>
	<maml:alertSet>
		<maml:title></maml:title>
		<maml:alert>
			<maml:para></maml:para>
		</maml:alert>
	</maml:alertSet>
	<command:examples>
		<command:example>
			<maml:title>
				-------------------------- EXAMPLE 1 --------------------------
			</maml:title>
			<maml:introduction>
				<maml:para>PS C:\&gt; </maml:para>
			</maml:introduction>
			<dev:code>Get-ADObjectPagedAttribute -Identity 'Finance Department' -Attribute member
			</dev:code>
			<dev:remarks>
				<maml:para>CN=jane.doe,OU=foo,DC=bar,DC=com
CN=john.smith,OU=foo,DC=bar,DC=com
CN=some.body,OU=foo,DC=bar,DC=com
</maml:para>
				<maml:para></maml:para>
				<maml:para></maml:para>
				<maml:para>Description</maml:para>
                <maml:para>-----------</maml:para>
				<maml:para>This example retrieves the value of the 'member' attribute for an Active Directory Group</maml:para>
				<maml:para></maml:para>
				<maml:para></maml:para>
				<maml:para></maml:para>
				<maml:para></maml:para>
			</dev:remarks>
			<command:commandLines>
				<command:commandLine>
					<command:commandText></command:commandText>
				</command:commandLine>
			</command:commandLines>
		</command:example>
		<command:example>
			<maml:title>
				-------------------------- EXAMPLE 2 --------------------------
			</maml:title>
			<maml:introduction>
				<maml:para>PS C:\&gt; </maml:para>
			</maml:introduction>
			<dev:code>Get-ADGroup -Filter {cn -eq 'Finance Department'} | Get-ADObjectPagedAttribute -Attribute member
			</dev:code>
			<dev:remarks>
				<maml:para>CN=jane.doe,OU=foo,DC=bar,DC=com
CN=john.smith,OU=foo,DC=bar,DC=com
CN=some.body,OU=foo,DC=bar,DC=com
</maml:para>
				<maml:para></maml:para>
				<maml:para></maml:para>
				<maml:para>Description</maml:para>
                <maml:para>-----------</maml:para>
				<maml:para>This example pipes an AD Group object into Get-ADObjectPagedAttribute and retrieves the values of the 'member' attribute</maml:para>
				<maml:para></maml:para>
				<maml:para></maml:para>
				<maml:para></maml:para>
				<maml:para></maml:para>
			</dev:remarks>
			<command:commandLines>
				<command:commandLine>
					<command:commandText></command:commandText>
				</command:commandLine>
			</command:commandLines>
		</command:example>
	</command:examples>
	<maml:relatedLinks>
	</maml:relatedLinks>
</command:command>
<command:command xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:command="http://schemas.microsoft.com/maml/dev/command/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10">
	<command:details>
		<command:name>Get-ADUserAttributeChanges</command:name>
		<maml:description>
			<maml:para>Retrieves replication metadata for all (or specific) LDAP attributes on a user object in Active Directory</maml:para>
		</maml:description>
		<maml:copyright>
			<maml:para />
		</maml:copyright>
		<command:verb>Get</command:verb>
		<command:noun>ADUserAttributeChanges</command:noun>
		<dev:version />
	</command:details>
	<maml:description>
		<maml:para>Retrieves replication metadata for all (or specific) LDAP attributes on a user object in Active Directory. Metadata returned contains the attribute name, last modification time, originating usn, modified usn and originating DSN (which refers to the Domain Controller that committed the change)</maml:para>
	</maml:description>
	<command:syntax>
		<command:syntaxItem>
			<maml:name>Get-ADUserAttributeChanges</maml:name>
			<command:parameter required="true" variableLength="true" globbing="false" pipelineInput="false" position="0">
				<maml:name>Identity</maml:name>
				<maml:description>
					<maml:para>A string value which can be searched in Active Directory to find the user account. String will be matched against the following LDAP attributes - (name)/(userPrincipalName)/(cn)/(samaccountname)/(distinguishedname)</maml:para>
				</maml:description>
				<command:parameterValue required="true" variableLength="true">String[]</command:parameterValue>
			</command:parameter>
			<command:parameter required="false" variableLength="true" globbing="false" pipelineInput="false" position="1">
				<maml:name>Attribute</maml:name>
				<maml:description>
					<maml:para>LDAP Display Name(s) of specific attribute(s) to return</maml:para>
				</maml:description>
				<command:parameterValue required="true" variableLength="true">String[]</command:parameterValue>
			</command:parameter>
		</command:syntaxItem>
		<command:syntaxItem>
			<maml:name>Get-ADUserAttributeChanges</maml:name>
			<command:parameter required="true" variableLength="false" globbing="false" pipelineInput="true (ByValue)" position="0">
				<maml:name>InputObject</maml:name>
				<maml:description>
					<maml:para>Retrieves replication metadata for the specified user objects. Enter a variable that contains the objects, or type a command to get the objects (i.e Get-ADUser). Can also accept string values (See Parameter 'Identity' for more information)</maml:para>
				</maml:description>
				<command:parameterValue required="true" variableLength="false">Object</command:parameterValue>
			</command:parameter>
			<command:parameter required="false" variableLength="true" globbing="false" pipelineInput="false" position="1">
				<maml:name>Attribute</maml:name>
				<maml:description>
					<maml:para>LDAP Display Name(s) of specific attribute(s) to return</maml:para>
				</maml:description>
				<command:parameterValue required="true" variableLength="true">String[]</command:parameterValue>
			</command:parameter>
		</command:syntaxItem>
	</command:syntax>
	<command:parameters>
		<command:parameter required="true" variableLength="true" globbing="false" pipelineInput="false" position="0">
			<maml:name>Identity</maml:name>
			<maml:description>
				<maml:para>A string value which can be searched in Active Directory to find the user account. String will be matched against the following LDAP attributes - (name)/(userPrincipalName)/(cn)/(samaccountname)/(distinguishedname)</maml:para>
			</maml:description>
			<command:parameterValue required="true" variableLength="true">String[]</command:parameterValue>
			<dev:type>
				<maml:name>String[]</maml:name>
				<maml:uri/>
			</dev:type>
			<dev:defaultValue></dev:defaultValue>
		</command:parameter>
		<command:parameter required="false" variableLength="true" globbing="false" pipelineInput="false" position="1">
			<maml:name>Attribute</maml:name>
			<maml:description>
				<maml:para>LDAP Display Name(s) of specific attribute(s) to return</maml:para>
			</maml:description>
			<command:parameterValue required="true" variableLength="true">String[]</command:parameterValue>
			<dev:type>
				<maml:name>String[]</maml:name>
				<maml:uri/>
			</dev:type>
			<dev:defaultValue></dev:defaultValue>
		</command:parameter>
		<command:parameter required="true" variableLength="false" globbing="false" pipelineInput="true (ByValue)" position="0">
			<maml:name>InputObject</maml:name>
			<maml:description>
				<maml:para>Retrieves Logon statistics for the specified user objects. Enter a variable that contains the objects, or type a command to get the objects (i.e Get-ADUser). Can also accept string values (See Parameter 'Identity' for more information)</maml:para>
			</maml:description>
			<command:parameterValue required="true" variableLength="false">Object</command:parameterValue>
			<dev:type>
				<maml:name>Object</maml:name>
				<maml:uri/>
			</dev:type>
			<dev:defaultValue></dev:defaultValue>
		</command:parameter>
	</command:parameters>
	<command:inputTypes>
		<command:inputType>
			<dev:type>
				<maml:name>System.String
Microsoft.ActiveDirectory.Management.ADUser</maml:name>
				<maml:uri/>
				<maml:description>
					<maml:para></maml:para>
				</maml:description>
			</dev:type>
			<maml:description></maml:description>
		</command:inputType>
	</command:inputTypes>
	<command:returnValues>
		<command:returnValue>
			<dev:type>
				<maml:name></maml:name>
				<maml:uri/>
				<maml:description>
					<maml:para></maml:para>
				</maml:description>
			</dev:type>
			<maml:description></maml:description>
	</command:returnValue>
		</command:returnValues>
	<command:terminatingErrors></command:terminatingErrors>
	<command:nonTerminatingErrors></command:nonTerminatingErrors>
	<maml:alertSet>
		<maml:title></maml:title>
		<maml:alert>
			<maml:para></maml:para>
		</maml:alert>
	</maml:alertSet>
	<command:examples>
		<command:example>
			<maml:title>
				-------------------------- EXAMPLE 1 --------------------------
			</maml:title>
			<maml:introduction>
				<maml:para>PS C:\&gt; </maml:para>
			</maml:introduction>
			<dev:code>Get-ADUserAttributeChanges -Identity john.doe
			</dev:code>
			<dev:remarks>
				<maml:para>OriginatingServer                        Name                           LastOriginatingChangeTime
-----------------                        ----                           -------------------------
DC01.foo.bar.com                         sAMAccountName                 26/03/2013 19:39:28
DC01.foo.bar.com                         proxyaddresses                 26/03/2013 19:48:10
DC01.foo.bar.com                         givenName                      26/03/2013 19:39:28
DC01.foo.bar.com                         codePage                       26/03/2013 19:39:28
DC01.foo.bar.com                         ntPwdHistory                   02/07/2013 10:35:27
DC01.foo.bar.com                         objectCategory                 26/03/2013 19:39:28
DC01.foo.bar.com                         loginShell                     26/03/2013 19:39:28
</maml:para>
				<maml:para></maml:para>
				<maml:para></maml:para>
				<maml:para>Description</maml:para>
                <maml:para>-----------</maml:para>
				<maml:para>This example retrieves replication metadata for user 'john.doe' and returns all modified LDAP attributes (Output above is truncated)</maml:para>
				<maml:para></maml:para>
				<maml:para></maml:para>
				<maml:para></maml:para>
				<maml:para></maml:para>
			</dev:remarks>
			<command:commandLines>
				<command:commandLine>
					<command:commandText></command:commandText>
				</command:commandLine>
			</command:commandLines>
		</command:example>
		<command:example>
			<maml:title>
				-------------------------- EXAMPLE 2 --------------------------
			</maml:title>
			<maml:introduction>
				<maml:para>PS C:\&gt; </maml:para>
			</maml:introduction>
			<dev:code>Get-ADUserAttributeChanges -Identity john.doe -Attribute proxyAddresses
			</dev:code>
			<dev:remarks>
				<maml:para>OriginatingServer                        Name                           LastOriginatingChangeTime
-----------------                        ----                           -------------------------
DC01.foo.bar.com                         proxyaddresses                 26/03/2013 19:48:10
</maml:para>
				<maml:para></maml:para>
				<maml:para></maml:para>
				<maml:para>Description</maml:para>
                <maml:para>-----------</maml:para>
				<maml:para>This example retrieves replication metadata for user 'john.doe' but only for LDAP attribute 'proxyAddresses'</maml:para>
				<maml:para></maml:para>
				<maml:para></maml:para>
				<maml:para></maml:para>
				<maml:para></maml:para>
			</dev:remarks>
			<command:commandLines>
				<command:commandLine>
					<command:commandText></command:commandText>
				</command:commandLine>
			</command:commandLines>
		</command:example>
		<command:example>
			<maml:title>
				-------------------------- EXAMPLE 3 --------------------------
			</maml:title>
			<maml:introduction>
				<maml:para>PS C:\&gt; </maml:para>
			</maml:introduction>
			<dev:code>Get-ADUserAttributeChanges -Identity john.doe -Attribute @('samaccountname','userprincipalname','cn')
			</dev:code>
			<dev:remarks>
				<maml:para>OriginatingServer                        Name                           LastOriginatingChangeTime
-----------------                        ----                           -------------------------
DC01.foo.bar.com                         sAMAccountName                 26/03/2013 19:39:28
DC01.foo.bar.com                         cn                             12/09/2013 08:50:48
DC01.foo.bar.com                         userPrincipalName              26/03/2013 22:50:30
</maml:para>
				<maml:para></maml:para>
				<maml:para></maml:para>
				<maml:para>Description</maml:para>
                <maml:para>-----------</maml:para>
				<maml:para>This example retrieves replication metadata for user 'john.doe' and limits the results to several LDAP attributes by passing an array to parameter Attribute</maml:para>
				<maml:para></maml:para>
				<maml:para></maml:para>
				<maml:para></maml:para>
				<maml:para></maml:para>
			</dev:remarks>
			<command:commandLines>
				<command:commandLine>
					<command:commandText></command:commandText>
				</command:commandLine>
			</command:commandLines>
		</command:example>
		<command:example>
			<maml:title>
				-------------------------- EXAMPLE 4 --------------------------
			</maml:title>
			<maml:introduction>
				<maml:para>PS C:\&gt; </maml:para>
			</maml:introduction>
			<dev:code>Get-ADUser -Filter {cn -eq 'john.doe'} | Get-ADUserAttributeChanges -Attribute @('samaccountname','userprincipalname','cn')
			</dev:code>
			<dev:remarks>
				<maml:para>OriginatingServer                        Name                           LastOriginatingChangeTime
-----------------                        ----                           -------------------------
DC01.foo.bar.com                         sAMAccountName                 26/03/2013 19:39:28
DC01.foo.bar.com                         cn                             12/09/2013 08:50:48
DC01.foo.bar.com                         userPrincipalName              26/03/2013 22:50:30
</maml:para>
				<maml:para></maml:para>
				<maml:para></maml:para>
				<maml:para>Description</maml:para>
                <maml:para>-----------</maml:para>
				<maml:para>In this example, an AD User object is passed through the pipeline to Get-ADUserAttributeChanges. As in EXAMPLE 3, only certain attributes are returned</maml:para>
				<maml:para></maml:para>
				<maml:para></maml:para>
				<maml:para></maml:para>
				<maml:para></maml:para>
			</dev:remarks>
			<command:commandLines>
				<command:commandLine>
					<command:commandText></command:commandText>
				</command:commandLine>
			</command:commandLines>
		</command:example>
		<command:example>
			<maml:title>
				-------------------------- EXAMPLE 5 --------------------------
			</maml:title>
			<maml:introduction>
				<maml:para>PS C:\&gt; </maml:para>
			</maml:introduction>
			<dev:code>Get-ADUser -Filter {(cn -eq 'john.doe') -or (cn -eq 'some.body')} | Get-ADUserAttributeChanges -Attribute @('samaccountname','userprincipalname','cn') | Format-Table OriginatingServer, Name, Timestamp, User
			</dev:code>
			<dev:remarks>
				<maml:para>OriginatingServer                             Name                                          Timestamp                                    User
-----------------                             ----                                          ---------                                    ----
DC01.foo.bar.com                              sAMAccountName                                26/03/2013 19:39:28                          john.doe
DC01.foo.bar.com                              cn                                            12/09/2013 08:50:48                          john.doe
DC01.foo.bar.com                              userPrincipalName                             26/03/2013 22:50:30                          john.doe
DC01.foo.bar.com                              userPrincipalName                             01/08/2012 03:49:59                          some.body
DC01.foo.bar.com                              sAMAccountName                                12/09/2006 17:02:50                          some.body
DC01.foo.bar.com                              cn                                            07/03/2012 12:02:30                          some.body
</maml:para>
				<maml:para></maml:para>
				<maml:para></maml:para>
				<maml:para>Description</maml:para>
                <maml:para>-----------</maml:para>
				<maml:para>In this example, multiple AD User objects are passed through the pipeline to Get-ADUserAttributeChanges. This is filtered by attribute, and an extra property 'User' is displayed using Format-Table. (Note: The property 'Timestamp' is an alias for property 'LastOriginatingChangeTime')</maml:para>
				<maml:para></maml:para>
				<maml:para></maml:para>
				<maml:para></maml:para>
				<maml:para></maml:para>
			</dev:remarks>
			<command:commandLines>
				<command:commandLine>
					<command:commandText></command:commandText>
				</command:commandLine>
			</command:commandLines>
		</command:example>
	</command:examples>
	<maml:relatedLinks>
	</maml:relatedLinks>
</command:command>
<command:command xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:command="http://schemas.microsoft.com/maml/dev/command/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10">
	<command:details>
		<command:name>Get-ADUserLogonTimes</command:name>
		<maml:description>
			<maml:para>Retrieve Latest Login times for an Active Directory User from each Domain Controller in the current Domain</maml:para>
		</maml:description>
		<maml:copyright>
			<maml:para />
		</maml:copyright>
		<command:verb>Get</command:verb>
		<command:noun>ADUserLogonTimes</command:noun>
		<dev:version />
	</command:details>
	<maml:description>
		<maml:para>Retrieves the value of lastLogon attribute from all Domain Controllers in the current domain, including the replicated value lastlogontimestamp</maml:para>
	</maml:description>
	<command:syntax>
		<command:syntaxItem>
			<maml:name>Get-ADUserLogonTimes</maml:name>
			<command:parameter required="true" variableLength="true" globbing="false" pipelineInput="false" position="0">
				<maml:name>Identity</maml:name>
				<maml:description>
					<maml:para>A string value which can be searched in Active Directory to find the user account. String will be matched against the following LDAP attributes - (name)/(userPrincipalName)/(cn)/(samaccountname)/(distinguishedname)</maml:para>
				</maml:description>
				<command:parameterValue required="true" variableLength="true">String[]</command:parameterValue>
			</command:parameter>
		</command:syntaxItem>
		<command:syntaxItem>
			<maml:name>Get-ADUserLogonTimes</maml:name>
			<command:parameter required="true" variableLength="false" globbing="false" pipelineInput="true (ByValue)" position="0">
				<maml:name>InputObject</maml:name>
				<maml:description>
					<maml:para>Retrieves Logon statistics for the specified user objects. Enter a variable that contains the objects, or type a command to get the objects (i.e Get-ADUser). Can also accept string values (See Parameter 'Identity' for more information)</maml:para>
				</maml:description>
				<command:parameterValue required="true" variableLength="false">Object</command:parameterValue>
			</command:parameter>
		</command:syntaxItem>
	</command:syntax>
	<command:parameters>
		<command:parameter required="true" variableLength="true" globbing="false" pipelineInput="false" position="0">
			<maml:name>Identity</maml:name>
			<maml:description>
				<maml:para>A string value which can be searched in Active Directory to find the user account. String will be matched against the following LDAP attributes - (name)/(userPrincipalName)/(cn)/(samaccountname)/(distinguishedname)</maml:para>
			</maml:description>
			<command:parameterValue required="true" variableLength="true">String[]</command:parameterValue>
			<dev:type>
				<maml:name>String[]</maml:name>
				<maml:uri/>
			</dev:type>
			<dev:defaultValue></dev:defaultValue>
		</command:parameter>
		<command:parameter required="true" variableLength="false" globbing="false" pipelineInput="true (ByValue)" position="0">
			<maml:name>InputObject</maml:name>
			<maml:description>
				<maml:para>Retrieves Logon statistics for the specified user objects. Enter a variable that contains the objects, or type a command to get the objects (i.e Get-ADUser). Can also accept string values (See Parameter 'Identity' for more information)</maml:para>
			</maml:description>
			<command:parameterValue required="true" variableLength="false">Object</command:parameterValue>
			<dev:type>
				<maml:name>Object</maml:name>
				<maml:uri/>
			</dev:type>
			<dev:defaultValue></dev:defaultValue>
		</command:parameter>
	</command:parameters>
	<command:inputTypes>
		<command:inputType>
			<dev:type>
				<maml:name>System.String
Microsoft.ActiveDirectory.Management.ADUser</maml:name>
				<maml:uri/>
				<maml:description>
					<maml:para></maml:para>
				</maml:description>
			</dev:type>
			<maml:description></maml:description>
		</command:inputType>
	</command:inputTypes>
	<command:returnValues>
		<command:returnValue>
			<dev:type>
				<maml:name></maml:name>
				<maml:uri/>
				<maml:description>
					<maml:para></maml:para>
				</maml:description>
			</dev:type>
			<maml:description></maml:description>
	</command:returnValue>
		</command:returnValues>
	<command:terminatingErrors></command:terminatingErrors>
	<command:nonTerminatingErrors></command:nonTerminatingErrors>
	<maml:alertSet>
		<maml:title></maml:title>
		<maml:alert>
			<maml:para></maml:para>
		</maml:alert>
	</maml:alertSet>
	<command:examples>
		<command:example>
			<maml:title>
				-------------------------- EXAMPLE 1 --------------------------
			</maml:title>
			<maml:introduction>
				<maml:para>PS C:\&gt; </maml:para>
			</maml:introduction>
			<dev:code>Get-ADUserLogonTimes -Identity john.doe
			</dev:code>
			<dev:remarks>
				<maml:para>Source                                                      LogonTime
------                                                      ---------
DC01.foo.bar.com                                            10/10/2013 10:09:08
DC02.foo.bar.com                                            10/10/2013 10:09:06
DC03.foo.bar.com                                            10/10/2013 11:28:49
DC04.foo.bar.com                                            10/10/2013 08:54:28
DC05.foo.bar.com                                            10/10/2013 11:52:57
Replicated                                                  04/10/2013 18:26:17
</maml:para>
				<maml:para></maml:para>
				<maml:para></maml:para>
				<maml:para>Description</maml:para>
                <maml:para>-----------</maml:para>
				<maml:para>This example retrieves the latest logon time stored on each Domain Controller for the user account 'john.doe'</maml:para>
				<maml:para></maml:para>
				<maml:para></maml:para>
				<maml:para></maml:para>
				<maml:para></maml:para>
			</dev:remarks>
			<command:commandLines>
				<command:commandLine>
					<command:commandText></command:commandText>
				</command:commandLine>
			</command:commandLines>
		</command:example>
		<command:example>
			<maml:title>
				-------------------------- EXAMPLE 2 --------------------------
			</maml:title>
			<maml:introduction>
				<maml:para>PS C:\&gt; </maml:para>
			</maml:introduction>
			<dev:code>Get-ADUser -Filter {cn -eq 'john.doe'} | Get-ADUserLogonTimes
			</dev:code>
			<dev:remarks>
				<maml:para>Source                                                      LogonTime
------                                                      ---------
DC01.foo.bar.com                                            10/10/2013 10:09:08
DC02.foo.bar.com                                            10/10/2013 10:09:06
DC03.foo.bar.com                                            10/10/2013 11:28:49
DC04.foo.bar.com                                            10/10/2013 08:54:28
DC05.foo.bar.com                                            10/10/2013 11:52:57
Replicated                                                  04/10/2013 18:26:17
</maml:para>
				<maml:para></maml:para>
				<maml:para></maml:para>
				<maml:para>Description</maml:para>
                <maml:para>-----------</maml:para>
				<maml:para>In this example, an AD User object is passed through the pipeline to Get-ADUserLogonTimes. The result is the same as the previous example</maml:para>
				<maml:para></maml:para>
				<maml:para></maml:para>
				<maml:para></maml:para>
				<maml:para></maml:para>
			</dev:remarks>
			<command:commandLines>
				<command:commandLine>
					<command:commandText></command:commandText>
				</command:commandLine>
			</command:commandLines>
		</command:example>
	</command:examples>
	<maml:relatedLinks>
	</maml:relatedLinks>
</command:command>
<command:command xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:command="http://schemas.microsoft.com/maml/dev/command/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10">
	<command:details>
		<command:name>Get-ADUserMembershipAudit</command:name>
		<maml:description>
			<maml:para>Returns group membership for an AD User, including the latest timestamp they were added to each group</maml:para>
		</maml:description>
		<maml:copyright>
			<maml:para />
		</maml:copyright>
		<command:verb>Get</command:verb>
		<command:noun>ADUserMembershipAudit</command:noun>
		<dev:version />
	</command:details>
	<maml:description>
		<maml:para>Returns current group membership for an AD User, including the latest timestamp they were added to each group. This cmdlet will NOT retrieve data for historic group memberships, only current</maml:para>
	</maml:description>
	<command:syntax>
		<command:syntaxItem>
			<maml:name>Get-ADUserMembershipAudit</maml:name>
			<command:parameter required="true" variableLength="true" globbing="false" pipelineInput="false" position="0">
				<maml:name>Identity</maml:name>
				<maml:description>
					<maml:para>A string value which can be searched in Active Directory to find the user account. String will be matched against the following LDAP attributes - (name)/(userPrincipalName)/(cn)/(samaccountname)/(distinguishedname)</maml:para>
				</maml:description>
				<command:parameterValue required="true" variableLength="true">String[]</command:parameterValue>
			</command:parameter>
		</command:syntaxItem>
		<command:syntaxItem>
			<maml:name>Get-ADUserMembershipAudit</maml:name>
			<command:parameter required="true" variableLength="false" globbing="false" pipelineInput="true (ByValue)" position="0">
				<maml:name>InputObject</maml:name>
				<maml:description>
					<maml:para>Retrieve group membership information for the specified user objects. Enter a variable that contains the objects, or type a command to get the objects (i.e Get-ADUser). Can also accept string values (See Parameter 'Identity' for more information)</maml:para>
				</maml:description>
				<command:parameterValue required="true" variableLength="false">Object</command:parameterValue>
			</command:parameter>
		</command:syntaxItem>
	</command:syntax>
	<command:parameters>
		<command:parameter required="true" variableLength="true" globbing="false" pipelineInput="false" position="0">
			<maml:name>Identity</maml:name>
			<maml:description>
				<maml:para>A string value which can be searched in Active Directory to find the user account. String will be matched against the following LDAP attributes - (name)/(userPrincipalName)/(cn)/(samaccountname)/(distinguishedname)</maml:para>
			</maml:description>
			<command:parameterValue required="true" variableLength="true">String[]</command:parameterValue>
			<dev:type>
				<maml:name>String[]</maml:name>
				<maml:uri/>
			</dev:type>
			<dev:defaultValue></dev:defaultValue>
		</command:parameter>
		<command:parameter required="true" variableLength="false" globbing="false" pipelineInput="true (ByValue)" position="0">
			<maml:name>InputObject</maml:name>
			<maml:description>
				<maml:para>Retrieve group membership information for the specified user objects. Enter a variable that contains the objects, or type a command to get the objects (i.e Get-ADUser). Can also accept string values (See Parameter 'Identity' for more information)</maml:para>
			</maml:description>
			<command:parameterValue required="true" variableLength="false">Object</command:parameterValue>
			<dev:type>
				<maml:name>Object</maml:name>
				<maml:uri/>
			</dev:type>
			<dev:defaultValue></dev:defaultValue>
		</command:parameter>
	</command:parameters>
	<command:inputTypes>
		<command:inputType>
			<dev:type>
				<maml:name></maml:name>
				<maml:uri/>
				<maml:description>
					<maml:para></maml:para>
				</maml:description>
			</dev:type>
			<maml:description></maml:description>
		</command:inputType>
	</command:inputTypes>
	<command:returnValues>
		<command:returnValue>
			<dev:type>
				<maml:name></maml:name>
				<maml:uri/>
				<maml:description>
					<maml:para></maml:para>
				</maml:description>
			</dev:type>
			<maml:description></maml:description>
	</command:returnValue>
		</command:returnValues>
	<command:terminatingErrors></command:terminatingErrors>
	<command:nonTerminatingErrors></command:nonTerminatingErrors>
	<maml:alertSet>
		<maml:title></maml:title>
		<maml:alert>
			<maml:para></maml:para>
		</maml:alert>
	</maml:alertSet>
	<command:examples>
		<command:example>
			<maml:title>
				-------------------------- EXAMPLE 1 --------------------------
			</maml:title>
			<maml:introduction>
				<maml:para>PS C:\&gt; </maml:para>
			</maml:introduction>
			<dev:code>Get-ADUserMembershipAudit -Identity john.doe
			</dev:code>
			<dev:remarks>
				<maml:para>User                                          Group                                         DateAdded
----                                          -----                                         ---------
john.doe                                      CN=Finance Department,OU=DeptGroups,DC=Foo... 14/10/2013 11:00:12
john.doe                                      CN=Accounts Department,OU=DeptGroups,DC=Fo... 27/09/2013 08:45:27
john.doe                                      CN=Finance Local Admins,OU=RoleGroups,DC=F... 08/08/2013 09:57:49
</maml:para>
				<maml:para></maml:para>
				<maml:para></maml:para>
				<maml:para>Description</maml:para>
                <maml:para>-----------</maml:para>
				<maml:para>This example retrieves group membership information for the user 'john.doe'</maml:para>
				<maml:para></maml:para>
				<maml:para></maml:para>
				<maml:para></maml:para>
				<maml:para></maml:para>
			</dev:remarks>
			<command:commandLines>
				<command:commandLine>
					<command:commandText></command:commandText>
				</command:commandLine>
			</command:commandLines>
		</command:example>
		<command:example>
			<maml:title>
				-------------------------- EXAMPLE 2 --------------------------
			</maml:title>
			<maml:introduction>
				<maml:para>PS C:\&gt; </maml:para>
			</maml:introduction>
			<dev:code>Get-ADUser -Filter {cn -eq 'john.doe'} | Get-ADUserMembershipAudit
			</dev:code>
			<dev:remarks>
				<maml:para>User                                          Group                                         DateAdded
----                                          -----                                         ---------
john.doe                                      CN=Finance Department,OU=DeptGroups,DC=Foo... 14/10/2013 11:00:12
john.doe                                      CN=Accounts Department,OU=DeptGroups,DC=Fo... 27/09/2013 08:45:27
john.doe                                      CN=Finance Local Admins,OU=RoleGroups,DC=F... 08/08/2013 09:57:49
</maml:para>
				<maml:para></maml:para>
				<maml:para></maml:para>
				<maml:para>Description</maml:para>
                <maml:para>-----------</maml:para>
				<maml:para>In this example, an AD User object is passed through the pipeline into Get-ADUserMembershipAudit. It then retrieves group membership information for the user 'john.doe'</maml:para>
				<maml:para></maml:para>
				<maml:para></maml:para>
				<maml:para></maml:para>
				<maml:para></maml:para>
			</dev:remarks>
			<command:commandLines>
				<command:commandLine>
					<command:commandText></command:commandText>
				</command:commandLine>
			</command:commandLines>
		</command:example>
	</command:examples>
	<maml:relatedLinks>
	</maml:relatedLinks>
</command:command>
<command:command xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:command="http://schemas.microsoft.com/maml/dev/command/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10">
	<command:details>
		<command:name>New-RandomPassword</command:name>
		<maml:description>
			<maml:para>Generates a complex password of the specified length</maml:para>
		</maml:description>
		<maml:copyright>
			<maml:para />
		</maml:copyright>
		<command:verb>New</command:verb>
		<command:noun>RandomPassword</command:noun>
		<dev:version />
	</command:details>
	<maml:description>
		<maml:para>Generates a complex password of the specified length</maml:para>
		<maml:para>Each Password contains at least 1 of each of the following character sets</maml:para>
		<maml:para>&gt;&gt;&gt; UPPERCASE letters</maml:para>
		<maml:para>&gt;&gt;&gt; lowercase letters</maml:para>
		<maml:para>&gt;&gt;&gt; Numerics</maml:para>
		<maml:para>&gt;&gt;&gt; Symbols</maml:para>
	</maml:description>
	<command:syntax>
		<command:syntaxItem>
			<maml:name>New-RandomPassword</maml:name>
			<command:parameter required="true" variableLength="false" globbing="false" pipelineInput="false" position="0">
				<maml:name>Length</maml:name>
				<maml:description>
					<maml:para>The length of the password to be generated</maml:para>
				</maml:description>
				<command:parameterValue required="true" variableLength="false">Int32</command:parameterValue>
			</command:parameter>
		</command:syntaxItem>
	</command:syntax>
	<command:parameters>
		<command:parameter required="true" variableLength="false" globbing="false" pipelineInput="false" position="0">
			<maml:name>Length</maml:name>
			<maml:description>
				<maml:para>The length of the password to be generated</maml:para>
			</maml:description>
			<command:parameterValue required="true" variableLength="false">Int32</command:parameterValue>
			<dev:type>
				<maml:name>Int32</maml:name>
				<maml:uri/>
			</dev:type>
			<dev:defaultValue></dev:defaultValue>
		</command:parameter>
	</command:parameters>
	<command:inputTypes>
		<command:inputType>
			<dev:type>
				<maml:name></maml:name>
				<maml:uri/>
				<maml:description>
					<maml:para></maml:para>
				</maml:description>
			</dev:type>
			<maml:description></maml:description>
		</command:inputType>
	</command:inputTypes>
	<command:returnValues>
		<command:returnValue>
			<dev:type>
				<maml:name></maml:name>
				<maml:uri/>
				<maml:description>
					<maml:para></maml:para>
				</maml:description>
			</dev:type>
			<maml:description></maml:description>
	</command:returnValue>
		</command:returnValues>
	<command:terminatingErrors></command:terminatingErrors>
	<command:nonTerminatingErrors></command:nonTerminatingErrors>
	<maml:alertSet>
		<maml:title></maml:title>
		<maml:alert>
			<maml:para></maml:para>
		</maml:alert>
	</maml:alertSet>
	<command:examples>
		<command:example>
			<maml:title>
				-------------------------- EXAMPLE 1 --------------------------
			</maml:title>
			<maml:introduction>
				<maml:para>PS C:\&gt; </maml:para>
			</maml:introduction>
			<dev:code>1..10 | % {New-RandomPassword -Length 12}
			</dev:code>
			<dev:remarks>
				<maml:para>aK3Rpr!vn6xU
*7UO0'oj/~,y
}NuCGv.0D/{4
/3y"$hoB/&lt;n6
YFuV"&lt;r7a8qq
;'(r{P7wR#LC
rW?f1288+3S2
9fNTfY:7wO)z
C{29t0Y4E%0k
.!c(e)4pTFa)</maml:para>
				<maml:para></maml:para>
				<maml:para></maml:para>
				<maml:para>Description</maml:para>
                <maml:para>-----------</maml:para>
				<maml:para>Generates a 12 character complex password 10 times</maml:para>
				<maml:para></maml:para>
				<maml:para></maml:para>
				<maml:para></maml:para>
				<maml:para></maml:para>
			</dev:remarks>
			<command:commandLines>
				<command:commandLine>
					<command:commandText></command:commandText>
				</command:commandLine>
			</command:commandLines>
		</command:example>
	</command:examples>
	<maml:relatedLinks>
	</maml:relatedLinks>
</command:command>
<command:command xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:command="http://schemas.microsoft.com/maml/dev/command/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10">
	<command:details>
		<command:name>Test-ADUserCredentials</command:name>
		<maml:description>
			<maml:para>Authenticate a given username/password against Active Directory</maml:para>
		</maml:description>
		<maml:copyright>
			<maml:para />
		</maml:copyright>
		<command:verb>Test</command:verb>
		<command:noun>ADUserCredentials</command:noun>
		<dev:version />
	</command:details>
	<maml:description>
		<maml:para>Authenticate a given username/password against Active Directory. Cmdlet returns TRUE if authentication successful, else returns FALSE</maml:para>
	</maml:description>
	<command:syntax>
		<command:syntaxItem>
			<maml:name>Test-ADUserCredentials</maml:name>
			<command:parameter required="true" variableLength="false" globbing="false" pipelineInput="false" position="0">
				<maml:name>Username</maml:name>
				<maml:description>
					<maml:para>sAMAccountname of the user account to test</maml:para>
				</maml:description>
				<command:parameterValue required="true" variableLength="false">String</command:parameterValue>
			</command:parameter>
			<command:parameter required="true" variableLength="false" globbing="false" pipelineInput="false" position="1">
				<maml:name>Password</maml:name>
				<maml:description>
					<maml:para>The password of the account to test</maml:para>
				</maml:description>
				<command:parameterValue required="true" variableLength="false">String</command:parameterValue>
			</command:parameter>
			<command:parameter required="false" variableLength="false" globbing="false" pipelineInput="false" position="2">
				<maml:name>Domain</maml:name>
				<maml:description>
					<maml:para>NetBIOS name of the domain to authenticate against</maml:para>
				</maml:description>
				<command:parameterValue required="true" variableLength="false">String</command:parameterValue>
			</command:parameter>
		</command:syntaxItem>
	</command:syntax>
	<command:parameters>
		<command:parameter required="true" variableLength="false" globbing="false" pipelineInput="false" position="0">
			<maml:name>Username</maml:name>
			<maml:description>
				<maml:para>sAMAccountname of the user account to test</maml:para>
			</maml:description>
			<command:parameterValue required="true" variableLength="false">String</command:parameterValue>
			<dev:type>
				<maml:name>String</maml:name>
				<maml:uri/>
			</dev:type>
			<dev:defaultValue></dev:defaultValue>
		</command:parameter>
		<command:parameter required="true" variableLength="false" globbing="false" pipelineInput="false" position="1">
			<maml:name>Password</maml:name>
			<maml:description>
				<maml:para>The password of the account to test</maml:para>
			</maml:description>
			<command:parameterValue required="true" variableLength="false">String</command:parameterValue>
			<dev:type>
				<maml:name>String</maml:name>
				<maml:uri/>
			</dev:type>
			<dev:defaultValue></dev:defaultValue>
		</command:parameter>
		<command:parameter required="false" variableLength="false" globbing="false" pipelineInput="false" position="2">
			<maml:name>Domain</maml:name>
			<maml:description>
				<maml:para>NetBIOS name of the domain to authenticate against</maml:para>
			</maml:description>
			<command:parameterValue required="true" variableLength="false">String</command:parameterValue>
			<dev:type>
				<maml:name>String</maml:name>
				<maml:uri/>
			</dev:type>
			<dev:defaultValue>([System.DirectoryServices.ActiveDirectory.Domain]::GetCurrentDomain().Name)</dev:defaultValue>
		</command:parameter>
	</command:parameters>
	<command:inputTypes>
		<command:inputType>
			<dev:type>
				<maml:name></maml:name>
				<maml:uri/>
				<maml:description>
					<maml:para></maml:para>
				</maml:description>
			</dev:type>
			<maml:description></maml:description>
		</command:inputType>
	</command:inputTypes>
	<command:returnValues>
		<command:returnValue>
			<dev:type>
				<maml:name></maml:name>
				<maml:uri/>
				<maml:description>
					<maml:para></maml:para>
				</maml:description>
			</dev:type>
			<maml:description></maml:description>
	</command:returnValue>
		</command:returnValues>
	<command:terminatingErrors></command:terminatingErrors>
	<command:nonTerminatingErrors></command:nonTerminatingErrors>
	<maml:alertSet>
		<maml:title></maml:title>
		<maml:alert>
			<maml:para></maml:para>
		</maml:alert>
	</maml:alertSet>
	<command:examples>
		<command:example>
			<maml:title>
				-------------------------- EXAMPLE 1 --------------------------
			</maml:title>
			<maml:introduction>
				<maml:para>PS C:\&gt; </maml:para>
			</maml:introduction>
			<dev:code>Test-ADUserCredentials -Username john.doe -Password password1
			</dev:code>
			<dev:remarks>
				<maml:para></maml:para>
				<maml:para></maml:para>
				<maml:para>Description</maml:para>
                <maml:para>-----------</maml:para>
				<maml:para>Authenticates credentials for user account 'john.doe' against the current Active Directory domain</maml:para>
				<maml:para></maml:para>
				<maml:para></maml:para>
				<maml:para></maml:para>
				<maml:para></maml:para>
			</dev:remarks>
			<command:commandLines>
				<command:commandLine>
					<command:commandText></command:commandText>
				</command:commandLine>
			</command:commandLines>
		</command:example>
	</command:examples>
	<maml:relatedLinks>
	</maml:relatedLinks>
</command:command>
<command:command xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:command="http://schemas.microsoft.com/maml/dev/command/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10">
	<command:details>
		<command:name>Test-ADUserLogonStatus</command:name>
		<maml:description>
			<maml:para>Retrieve Active Directory user settings which may deny/restrict logons and cause authentication issues</maml:para>
		</maml:description>
		<maml:copyright>
			<maml:para />
		</maml:copyright>
		<command:verb>Test</command:verb>
		<command:noun>ADUserLogonStatus</command:noun>
		<dev:version />
	</command:details>
	<maml:description>
		<maml:para>Retrieve Active Directory user settings which may deny/restrict logons and cause authentication issues</maml:para>
		<maml:para>The specific data retrieved is:</maml:para>
		<maml:para>&gt;&gt;&gt; Which Workstations is the user account allowed to log onto</maml:para>
		<maml:para>&gt;&gt;&gt; Is the account disabled</maml:para>
		<maml:para>&gt;&gt;&gt; Is the account locked out</maml:para>
		<maml:para>&gt;&gt;&gt; Has the password expired</maml:para>
		<maml:para>&gt;&gt;&gt; What date does the password expire</maml:para>
		<maml:para>&gt;&gt;&gt; When does the account expire</maml:para>
		<maml:para></maml:para>
	</maml:description>
	<command:syntax>
		<command:syntaxItem>
			<maml:name>Test-ADUserLogonStatus</maml:name>
			<command:parameter required="true" variableLength="true" globbing="false" pipelineInput="false" position="0">
				<maml:name>Identity</maml:name>
				<maml:description>
					<maml:para>A string value which can be searched in Active Directory to find the user account. String will be matched against the following LDAP attributes - (name)/(userPrincipalName)/(cn)/(samaccountname)/(distinguishedname)</maml:para>
				</maml:description>
				<command:parameterValue required="true" variableLength="true">String[]</command:parameterValue>
			</command:parameter>
		</command:syntaxItem>
		<command:syntaxItem>
			<maml:name>Test-ADUserLogonStatus</maml:name>
			<command:parameter required="true" variableLength="false" globbing="false" pipelineInput="true (ByValue)" position="0">
				<maml:name>InputObject</maml:name>
				<maml:description>
					<maml:para>Tests the logon status for specified user objects. Enter a variable that contains the objects, or type a command to get the objects (i.e Get-ADUser). Can also accept string values (See Parameter 'Identity' for more information)</maml:para>
				</maml:description>
				<command:parameterValue required="true" variableLength="false">Object</command:parameterValue>
			</command:parameter>
		</command:syntaxItem>
	</command:syntax>
	<command:parameters>
		<command:parameter required="true" variableLength="true" globbing="false" pipelineInput="false" position="0">
			<maml:name>Identity</maml:name>
			<maml:description>
				<maml:para>A string value which can be searched in Active Directory to find the user account. String will be matched against the following LDAP attributes - (name)/(userPrincipalName)/(cn)/(samaccountname)/(distinguishedname)</maml:para>
			</maml:description>
			<command:parameterValue required="true" variableLength="true">String[]</command:parameterValue>
			<dev:type>
				<maml:name>String[]</maml:name>
				<maml:uri/>
			</dev:type>
			<dev:defaultValue></dev:defaultValue>
		</command:parameter>
		<command:parameter required="true" variableLength="false" globbing="false" pipelineInput="true (ByValue)" position="0">
			<maml:name>InputObject</maml:name>
			<maml:description>
				<maml:para>Tests the logon status for specified user objects. Enter a variable that contains the objects, or type a command to get the objects (i.e Get-ADUser). Can also accept string values (See Parameter 'Identity' for more information)</maml:para>
			</maml:description>
			<command:parameterValue required="true" variableLength="false">Object</command:parameterValue>
			<dev:type>
				<maml:name>Object</maml:name>
				<maml:uri/>
			</dev:type>
			<dev:defaultValue></dev:defaultValue>
		</command:parameter>
	</command:parameters>
	<command:inputTypes>
		<command:inputType>
			<dev:type>
				<maml:name>System.String
Microsoft.ActiveDirectory.Management.ADUser</maml:name>
				<maml:uri/>
				<maml:description>
					<maml:para></maml:para>
				</maml:description>
			</dev:type>
			<maml:description></maml:description>
		</command:inputType>
	</command:inputTypes>
	<command:returnValues>
		<command:returnValue>
			<dev:type>
				<maml:name></maml:name>
				<maml:uri/>
				<maml:description>
					<maml:para></maml:para>
				</maml:description>
			</dev:type>
			<maml:description></maml:description>
	</command:returnValue>
		</command:returnValues>
	<command:terminatingErrors></command:terminatingErrors>
	<command:nonTerminatingErrors></command:nonTerminatingErrors>
	<maml:alertSet>
		<maml:title></maml:title>
		<maml:alert>
			<maml:para></maml:para>
		</maml:alert>
	</maml:alertSet>
	<command:examples>
		<command:example>
			<maml:title>
				-------------------------- EXAMPLE 1 --------------------------
			</maml:title>
			<maml:introduction>
				<maml:para>PS C:\&gt; </maml:para>
			</maml:introduction>
			<dev:code>Test-ADUserLogonStatus john.doe
			</dev:code>
			<dev:remarks>
				<maml:para>Name                   : john.doe
CanLogonToWorkstations : All
IsAccountDisabled      : False
IsAccountLockedOut     : False
IsPasswordExpired      : False
PasswordExpiryDate     : Never
AccountExpiryDate      : Never
UserAccountControl     : {ADS_UF_NORMAL_ACCOUNT}
</maml:para>
				<maml:para></maml:para>
				<maml:para></maml:para>
				<maml:para>Description</maml:para>
                <maml:para>-----------</maml:para>
				<maml:para>Tests for user settings which may deny/restrict logons and cause authentication issues for account 'cusmbf'</maml:para>
				<maml:para></maml:para>
				<maml:para></maml:para>
				<maml:para></maml:para>
				<maml:para></maml:para>
			</dev:remarks>
			<command:commandLines>
				<command:commandLine>
					<command:commandText></command:commandText>
				</command:commandLine>
			</command:commandLines>
		</command:example>
		<command:example>
			<maml:title>
				-------------------------- EXAMPLE 1 --------------------------
			</maml:title>
			<maml:introduction>
				<maml:para>PS C:\&gt; </maml:para>
			</maml:introduction>
			<dev:code>Get-ADUser -Filter {sAMAccountName -like 'john*'} | Test-ADUserLogonStatus
			</dev:code>
			<dev:remarks>
				<maml:para>Name                   : john.doe
CanLogonToWorkstations : All
IsAccountDisabled      : False
IsAccountLockedOut     : False
IsPasswordExpired      : False
PasswordExpiryDate     : Never
AccountExpiryDate      : Never
UserAccountControl     : {ADS_UF_NORMAL_ACCOUNT}

Name                   : john.smith
CanLogonToWorkstations : PERSONNEL04
IsAccountDisabled      : False
IsAccountLockedOut     : False
IsPasswordExpired      : False
PasswordExpiryDate     : 01/02/2014 08:30:00
AccountExpiryDate      : Never
UserAccountControl     : {ADS_UF_NORMAL_ACCOUNT}

Name                   : john.temp
CanLogonToWorkstations : All
IsAccountDisabled      : True
IsAccountLockedOut     : False
IsPasswordExpired      : False
PasswordExpiryDate     : Never
AccountExpiryDate      : Never
UserAccountControl     : {ADS_UF_ACCOUNTDISABLE, ADS_UF_NORMAL_ACCOUNT, ADS_UF_DONT_EXPIRE_PASSWORD}
</maml:para>
				<maml:para></maml:para>
				<maml:para></maml:para>
				<maml:para>Description</maml:para>
                <maml:para>-----------</maml:para>
				<maml:para>Tests for user settings which may deny/restrict logons and cause authentication issues for accounts 'john.doe', 'john.smith' and 'john.temp'</maml:para>
				<maml:para>Data is passed through the pipeline via cmdlet Get-ADUser</maml:para>
				<maml:para></maml:para>
				<maml:para></maml:para>
				<maml:para></maml:para>
				<maml:para></maml:para>
			</dev:remarks>
			<command:commandLines>
				<command:commandLine>
					<command:commandText></command:commandText>
				</command:commandLine>
			</command:commandLines>
		</command:example>
	</command:examples>
	<maml:relatedLinks>
	</maml:relatedLinks>
</command:command>
</helpItems>